Channel-Dependent One-Time Password Authentication System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional one-time password systems are vulnerable to misuse by unauthorized users, as attackers can use gained passwords across different clients and contexts, lacking sufficient security measures.
Innovation Solution
A dual-factor authorization system generates channel-dependent one-time passwords by extracting client and user codes from an authorization code, transmitting them via different channels, and verifying the reformed authorization code to ensure secure access, preventing unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional one-time password systems are used, then simplicity of authentication is maintained, but security against unauthorized access deteriorates
Solution Approach 1:
The authorization code is segmented into two separate components: a client code transmitted to the computing system and a user code transmitted to the user via a different channel. This segmentation ensures that even if one code is compromised, the other remains secure, thereby improving security without requiring a completely new system architecture.
Solution Approach 2:
The patent introduces an intermediary authorization code that acts as a bridge between the client and user. This intermediary code is generated by the authorization system and then split into client and user codes, which must be combined and verified together. This intermediary mechanism adds a layer of security that prevents unauthorized access while maintaining a manageable system structure.
2Reliability
If channel-dependent one-time passwords are implemented, then unauthorized access is prevented, but user burden increases
Solution Approach 1:
The system automatically generates the authorization code, segments it into client and user codes, and handles the verification process. The user simply needs to enter the user code they receive, while the system manages the complex tasks of code generation, segmentation, transmission through different channels, and verification. This self-service approach maintains ease of operation for users while implementing robust security measures.
3Reliability
If authorization codes are restricted to specific contexts, then misuse by attackers is reduced, but system adaptability deteriorates
Solution Approach 1:
The authorization code is designed with local quality characteristics where specific portions of the code (client code and user code) have specific functions and are valid in specific contexts. The client code is tied to a particular computing system while the user code is transmitted through a different channel. This local quality approach allows the system to enforce context-specific security rules while maintaining the ability to adapt to different authentication scenarios by adjusting which codes are required and how they are verified.
Data Source
AI summary
The present disclosure is directed to a novel system for using a dual factor authorization design for generating channel-dependent one-time passwords. In particular, the system may extract a client code and user code from an authorization code to be sent to a client and a user, respectively. When the user submits the user code via the client, the user code is combined with the client code to create the full authorization code to allow for the authentication of the user. The authorization code may further be mapped to a specific client and/or context. In this way, the system provides a secure way to minimize the incidence of unauthorized access to a user's account without creating additional technical burdens for the user.